dnf(4|5).mark: mark packages in DNF state database

This adjustment allows the definition of the mark with the RPMs and runs
DNF after installing the RPMs to put the proper markings in the DNF
state database. See osbuild#455.

This ensures that packages don't get removed during `autoremove` leading
to broken systems.

Two stages are provided, one for dnf-3 and one for dnf5.

stages/org.osbuild.dnf4.mark

@@ -0,0 +1,78 @@
+#!/usr/bin/python3
+"""
+Mark packages in the DNF state database.
+"""
+
+import itertools
+import operator
+import shutil
+import subprocess
+import sys
+
+from osbuild import api
+
+SCHEMA_2 = """
+"options": {
+  "additionalProperties": false,
+  "properties": {
+    "packages": {
+      "type": "array",
+      "minItems": 1,
+      "description": "Packages and their marks.",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "mark"],
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Package name."
+          },
+          "mark": {
+            "type": "string",
+            "enum": ["install", "group"],
+            "description": "Package mark."
+          }
+        }
+      }
+    }
+  }
+}
+"""
+
+
+def mark(packages):
+    dnf_bin = shutil.which("dnf-3")
+
+    # group by markings
+    markings = dict(
+        itertools.groupby(
+            sorted(packages, key=operator.itemgetter("mark")),
+            operator.itemgetter("mark"),
+        )
+    )
+
+    if "install" in markings:
+        subprocess.run(
+            [dnf_bin, "mark", "-y", "install"]
+            + [package["name"] for package in markings["install"]],
+            check=True,
+        )
+
+    if "group" in markings:
+        subprocess.run(
+            [dnf_bin, "mark", "-y", "group"]
+            + [package["name"] for package in markings["group"]],
+            check=True,
+        )
+
+
+def main(_, options):
+    mark(options["packages"])
+    return 0
+
+
+if __name__ == "__main__":
+    args = api.arguments()
+    r = main(args["tree"], args["options"])
+    sys.exit(r)

stages/org.osbuild.dnf5.mark

@@ -0,0 +1,81 @@
+#!/usr/bin/python3
+"""
+Mark packages in the DNF state database.
+"""
+
+import itertools
+import operator
+import shutil
+import subprocess
+import sys
+
+from osbuild import api
+
+SCHEMA_2 = """
+"options": {
+  "additionalProperties": false,
+  "properties": {
+    "packages": {
+      "type": "array",
+      "minItems": 1,
+      "description": "Packages and their marks.",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "mark"],
+        "properties": {
+          "name": {
+            "type": "string",
+            "description": "Package name."
+          },
+          "mark": {
+            "type": "string",
+            "enum": ["user", "dependency", "weak", "group"],
+            "description": "Package mark."
+          },
+          "group": {
+            "type": "string",
+            "description": "Group to mark package for when `mark` is `group`."
+          }
+        }
+      }
+    }
+  }
+}
+"""
+
+
+def mark(packages):
+    dnf_bin = shutil.which("dnf5")
+
+    # group by markings
+    markings = dict(
+        itertools.groupby(
+            sorted(packages, key=operator.itemgetter("name")),
+            operator.itemgetter("name"),
+        )
+    )
+
+    for mark_as in ["user", "dependency", "weak"]:
+        subprocess.run(
+            [dnf_bin, "mark", "-y", mark_as]
+            + [package["name"] for package in markings[mark]],
+            check=True,
+        )
+
+    for package in markings["group"]:
+        subprocess.run(
+            [dnf_bin, "mark", "-y", "group", package["group"], package["name"]],
+            check=True,
+        )
+
+
+def main(_, options):
+    mark(options["packages"])
+    return 0
+
+
+if __name__ == "__main__":
+    args = api.arguments()
+    r = main(args["tree"], args["options"])
+    sys.exit(r)